
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier: fcZkJmBgNaF8uoeBRN+pgB9iLOr8p+UkQrAGD8tLMlk=
Subject key identifier: 79:55:A1:E6:CC:DA:43:51:D2:FF:91:CA:B2:4F:2B:54:DB:F9:59:92
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019D25F1C728759472B80C7FFDEB023DA603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number: 13FD
Signing time: Wed 25 Mar 2026 17:01:35 +0000
Manifest this update: Wed 25 Mar 2026 17:01:35 +0000
Manifest next update: Thu 26 Mar 2026 17:01:35 +0000
Files and hashes: 1: 4K_95KFZWMhbPpIfz5E1jHBv5aw.roa (hash: S+/oi+d3olEq6tAFWe3He8qCofTZg2SAbS0y1lTVFbQ=)
2: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
3: 9Yph-pozsAa1u8D3EORz5KZEkck.roa (hash: eBaChJ/lL8SbnPpF1SLCUTRSIb4xLZthmgzcZwPUd1M=)
4: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
5: BmzDco6FUeR2pV7CetfxwgyZzwU.roa (hash: 3e8ATRNUbcI+nS1vmGLQB8ObHNnkxsHOjtgJ15KBPNU=)
6: EGTr11Cn33WgsBkSO-DW_brv2pQ.roa (hash: WbBfhfc/J57F6babpd8iRrGBrz8Jx8j1fD8g8nHbBpM=)
7: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
8: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
9: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
10: Q7sGk7ECwFV3meUPYImkro5mZn8.roa (hash: yPT2eaBvSLQfJfLB4jWSat0V9vFdL71JwO3EoW7qPCQ=)
11: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
12: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
13: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
14: YrfvxNJdeHYuSdfjBibJ7k6pvEE.roa (hash: oBcJN0/vUgerckttMrITgGrAWVOsR/md3WZHA4+tgo0=)
15: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
16: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
17: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
18: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
19: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: 5dCF+mHac9AMLnPKyqCMQP6X3vo2ddxQm+EPXwD63T8=)
20: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c7:28:75:94:72:b8:0c:7f:fd:eb:02:3d:a6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Mar 25 17:01:35 2026 GMT
Not After : Mar 26 17:01:35 2026 GMT
Subject: CN=7955a1e6ccda4351d2ff91cab24f2b54dbf95992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:cd:90:55:3a:9a:5a:8b:cf:58:ef:da:8b:
d4:41:a0:bd:de:ce:37:11:50:95:31:28:7f:9c:5d:
c4:e0:16:cb:04:b7:60:fc:a9:06:19:fe:5f:d4:10:
d1:bf:b3:0e:83:0b:6c:44:99:7e:eb:83:c3:1c:f3:
41:ad:e9:36:9a:5d:e3:c3:d2:68:2c:f5:9d:41:86:
02:48:bc:b2:8b:c2:a0:d8:1f:e1:75:70:21:9a:75:
ed:e5:53:09:a0:c4:83:d0:e9:69:49:50:74:24:88:
9d:5c:62:89:63:32:e5:e6:06:bf:5c:9e:25:b3:42:
96:40:42:ba:11:0f:5b:2b:25:8c:59:dc:cb:62:89:
de:67:2e:8b:4d:c1:c9:ff:3e:3c:8c:95:df:14:84:
60:ab:52:35:98:10:91:0f:47:63:ad:04:12:2f:cd:
f2:27:43:a6:b4:ae:19:78:51:64:95:09:99:83:8e:
f3:a1:47:d0:1d:ef:de:a6:f9:3c:64:5a:f7:a7:11:
15:f4:1a:3e:eb:c1:a6:05:32:48:0b:db:92:b0:cc:
55:11:58:a6:1f:8c:f8:2a:6b:6d:9a:53:58:1d:91:
75:93:bb:31:dd:f7:77:47:5f:77:0f:fd:cf:b9:6e:
2c:44:4c:c6:f8:34:0a:97:57:ce:76:4b:98:06:16:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:55:A1:E6:CC:DA:43:51:D2:FF:91:CA:B2:4F:2B:54:DB:F9:59:92
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:85:de:ba:b2:7a:d2:0c:60:d8:01:c7:25:44:72:e2:d9:c5:
6b:52:fe:6f:56:0d:88:ff:72:21:5e:8b:72:bd:41:1d:42:67:
8c:4c:29:0e:16:74:26:fe:34:74:e3:e5:41:b0:ff:66:8b:58:
a8:42:60:09:f0:81:18:7b:c6:04:5d:d2:2c:9d:5f:64:39:33:
e3:86:f5:4c:91:2d:a3:fe:c6:d1:10:5b:c0:be:e0:d6:31:7e:
7d:86:8a:9b:0b:49:42:eb:04:49:42:24:7b:f7:36:33:5b:e5:
f5:39:13:fe:31:50:f5:8f:ff:15:6d:c8:dc:6f:5f:cc:da:5d:
02:c0:63:c8:df:c1:e4:89:ca:8f:20:24:9e:27:0b:7c:22:e4:
5f:57:b8:e9:0d:d2:0c:02:9b:68:ac:24:39:fd:4e:88:c5:b7:
2e:a7:cf:f1:45:99:bb:2d:46:9f:04:af:9f:94:2b:bb:7e:67:
5b:fe:21:f8:c4:6b:5c:f8:e4:21:7f:f0:6b:e0:52:cf:67:13:
88:91:94:eb:d4:b3:09:8c:5a:31:bd:07:8e:40:2f:e8:69:ce:
39:93:4f:cb:de:44:5e:2d:b4:cc:a2:14:85:68:77:0d:eb:77:
e2:5d:2c:76:cf:5e:82:a1:23:14:6f:ae:cb:bd:46:91:38:4d:
82:03:0d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:34 2026 by rpki-client